Open Side Menu Go to the Top
Register
Encrypted sites (included pics) Encrypted sites (included pics)

01-19-2012 , 02:19 PM
i don't know if there's a connection to this but my msn got hacked earlier on this year and i saw that i had sent all my contacts spam.

When i go on sites that has sensitive info in it like moneybookers and msn i get this 'https' that's red and crossed out. what does this mean and how do i get rid of it?



also is it safe to log in and make transactions via moneybookers with this warning?

I also ran a kaspersky anti-virus scan and got nothing.
Encrypted sites (included pics) Quote
01-20-2012 , 11:54 AM
i just deleted my cookies and this got rid of the red crossed out http. the problem is when i click on the lock on the top left i get this message which makes me feel unsafe when entering sensitive info:
Encrypted sites (included pics) Quote
01-20-2012 , 10:25 PM
if this was my computer i would likely follow some more steps of the malware sticky to ensure that my computer is clean. the malwarebytes scan would be my first step, and a clean bill of health after an OTL review by gabe is always nice. it could be otherwise just fine, but it's too important not to double check imo

some easier things to double check before you do that:
-is your browser completely up to date?
-is your OS up to date?
-is your computer time/date set properly?
Encrypted sites (included pics) Quote
01-21-2012 , 08:13 PM
Thanks for the reply joe. I went onto windows update and it had an update which i thought would have fixed the problem so i went for it and downloaded it.

as for the issue i don't think it's fixed yet. pics of the new messages when i get onto the http sites like moneybookers and hotmail below.

the 'camellia_256_cbc' is for 'https://www.moneybookers.com/app/'
I found something that could be related.
http://www.google.com/support/forum/...52e70152&hl=en

please help

Malwarebytes scan results below

Spoiler:
Malwarebytes Anti-Malware (Trial) 1.60.0.1800
www.malwarebytes.org

Database version: v2012.01.21.02

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Owner :: OWNER-PC [administrator]

Protection: Enabled

1/21/2012 10:55:02 PM
mbam-log-2012-01-21 (22-55-02).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 373284
Time elapsed: 43 minute(s), 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\BlueSquare Poker (PUP.Casino) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\Paddy Power Poker (PUP.Casino) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 5
C:\Poker\BlueSquare Poker\_SetupPoker_6381.exe (PUP.Casino) -> Quarantined and deleted successfully.
C:\Poker\Paddy Power Poker\_SetupPoker_618.exe (PUP.Casino) -> Quarantined and deleted successfully.
C:\Users\Owner\AppData\Local\Temp\ptuB398_tmp.exe (PUP.Casino) -> Quarantined and deleted successfully.
C:\Users\Owner\Downloads\SetupPoker_6381.exe (PUP.Casino) -> Quarantined and deleted successfully.
C:\Users\Owner\Downloads\SetupPoker_6ae0b_en.exe (PUP.Casino) -> Quarantined and deleted successfully.

(end)
Encrypted sites (included pics) Quote
01-21-2012 , 08:55 PM
I'm scared to go on my hotmail or enter in my moneybookers password in because of this message:

'your connection to moneybookers.com is encrypted with 256-bit encryption. however this page includes other resorces which are not secure. these resourses can be viewed by others while in transit and can be modified by an attacker to change the look og the page'

should i be scared to put in sensitive info?
Encrypted sites (included pics) Quote
01-22-2012 , 06:20 PM
Got your PM, but I'm not the best person to ask about this. I really don't know anything about Moneybookers or how safe their setup is or isn't or whether MS is overreacting.

I would contact Moneybookers directly.

"https" (as opposed to simple "http") stands for "secure." It's the same thing as http with an extra layer of encryption. Not sure what the problem here is I would talk to them.
Encrypted sites (included pics) Quote
01-22-2012 , 07:38 PM
Why does my Hotmail show up as http://by155w.bay155.mail.live.com/d...85&fid=1&fav=1 when I type in MSN.com
Encrypted sites (included pics) Quote
01-22-2012 , 08:40 PM
You should check to see if you have a Chrome extension that is inserting insecure elements into the page. Try disabling all of your Chrome extensions.
Encrypted sites (included pics) Quote
01-23-2012 , 11:53 AM
Disabled chrome extensions. got the green light all fixed. thank you funky <3
Encrypted sites (included pics) Quote

      
m